Define authorized scope of projects for users

It should be included, by your description.